@cloud-copilot/iam-collect 0.1.15 → 0.1.17

package/README.md

@@ -46,12 +46,16 @@ This will download the IAM data from the current account to the `./iam-data` dir
 
 # Supported Services and Data Downloaded
 
-| Service | Resource Type    | Data Downloaded                                                                                               |
-| ------- | ---------------- | ------------------------------------------------------------------------------------------------------------- |
-| iam     | Users            | name, path, id, groups, tags, inline policies, managed policies, permission boundary                          |
-| iam     | Groups           | name, path, id, inline policies, managed policies                                                             |
-| iam     | Roles            | name, path, id, trust policy, inline policies, managed policies, instance profiles, tags, permission boundary |
-| iam     | Managed Policies | name, path, id, default version, default version doc, tags                                                    |
-| kms     | Keys             | id, policy, tags                                                                                              |
-| lambda  | Functions        | name, role, tags, policy                                                                                      |
-| s3      | Buckets          | name, region, tags, policy, block public access configuration, default encryption                             |
+| Service       | Resource Type                     | Data Downloaded                                                                                               |
+| ------------- | --------------------------------- | ------------------------------------------------------------------------------------------------------------- |
+| iam           | Users                             | name, path, id, groups, tags, inline policies, managed policies, permission boundary                          |
+| iam           | Groups                            | name, path, id, inline policies, managed policies                                                             |
+| iam           | Roles                             | name, path, id, trust policy, inline policies, managed policies, instance profiles, tags, permission boundary |
+| iam           | Customer and AWS Managed Policies | name, path, id, default version, default version doc, tags                                                    |
+| kms           | Keys                              | id, policy, tags                                                                                              |
+| lambda        | Functions                         | name, role, tags, policy                                                                                      |
+| s3            | Buckets                           | name, region, tags, policy, block public access configuration, default encryption                             |
+| organizations | Organizations                     | id, arn, root account id, enabled policy types, org structure                                                 |
+| organizations | Organizational Units              | id, arn, parent ou, enabled SCPs, enabled RCPs, tags                                                          |
+| organizations | Accounts                          | id, arn, parent ou, enabled SCPs, enabled RCPs, tags                                                          |
+| organizations | SCPs, RCPs                        | id, arn, name, description, tags, policy                                                                      |

package/dist/cjs/persistence/AwsIamStore.d.ts

@@ -25,6 +25,7 @@ export interface ResourceTypeParts {
      */
     resourceType?: string;
 }
+export type OrganizationPolicyType = 'scps' | 'rcps';
 /**
  * An interface for persisting AWS resource metadata.
  * Implementations can be backed by S3 or the local file system.
@@ -91,5 +92,103 @@ export interface AwsIamStore {
      * @param desiredResources - The list of resource arns that should exist.
      */
     syncResourceList(accountId: string, options: ResourceTypeParts, desiredResources: string[]): Promise<void>;
+    /**
+     * Save metadata for an AWS Organization
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param metadataType - The type of metadata to save (e.g., "metadata").
+     * @param data - The metadata content to save an an object.
+     */
+    saveOrganizationMetadata(organizationId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Delete metadata for an AWS Organization
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param metadataType - The type of metadata to delete (e.g., "metadata").
+     */
+    deleteOrganizationMetadata(organizationId: string, metadataType: string): Promise<void>;
+    /**
+     * List the Organizational Units (OUs) that have been saved for a given organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     */
+    listOrganizationalUnits(organizationId: string): Promise<string[]>;
+    /**
+     * Save metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to save (e.g., "metadata").
+     * @param data - The metadata content to save as an object.
+     */
+    saveOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Delete metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to delete (e.g., "metadata").
+     */
+    deleteOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string): Promise<void>;
+    /**
+     * Get metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to retrieve (e.g., "metadata").
+     * @param defaultValue - The default value to return if the metadata is not found.
+     */
+    getOrganizationalUnitMetadata<T, D extends T>(organizationId: string, ouId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Delete an Organizational Unit (OU) from an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     */
+    deleteOrganizationalUnit(organizationId: string, ouId: string): Promise<void>;
+    /**
+     * Delete metadata for an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to delete metadata for
+     * @param metadataType the type of metadata to delete (e.g., "metadata")
+     */
+    deleteOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string): Promise<void>;
+    /**
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to save metadata for
+     * @param metadataType the type of metadata to save (e.g., "metadata")
+     * @param data the content to save
+     */
+    saveOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Get metadata for an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to retrieve metadata for
+     * @param metadataType the type of metadata to retrieve (e.g., "metadata")
+     * @param defaultValue the default value to return if the metadata is not found
+     */
+    getOrganizationPolicyMetadata<T, D extends T>(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Delete an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to delete
+     */
+    deleteOrganizationPolicy(organizationId: string, policyType: OrganizationPolicyType, policyId: string): Promise<void>;
+    /**
+     * List the Organization Policies for a given organization and type
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @returns An array of policy IDs
+     */
+    listOrganizationPolicies(organizationId: string, policyType: OrganizationPolicyType): Promise<string[]>;
 }
 //# sourceMappingURL=AwsIamStore.d.ts.map

package/dist/cjs/persistence/AwsIamStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AwsIamStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/AwsIamStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEvE;;;;;;;OAOG;IACH,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3F;;;;;OAKG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7D;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAE/E;;;;;;;OAOG;IACH,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB"}
+{"version":3,"file":"AwsIamStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/AwsIamStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,CAAA;AAEpD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEvE;;;;;;;OAOG;IACH,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3F;;;;;OAKG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7D;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAE/E;;;;;;;OAOG;IACH,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhG;;;;;OAKG;IACH,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvF;;;;OAIG;IACH,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAElE;;;;;;;OAOG;IACH,8BAA8B,CAC5B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,gCAAgC,CAC9B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;OAOG;IACH,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAC1C,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;OAKG;IACH,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7E;;;;;;;OAOG;IACH,gCAAgC,CAC9B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;OAOG;IACH,8BAA8B,CAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;;OAQG;IACH,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAC1C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,wBAAwB,CACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,wBAAwB,CACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,GACjC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CACrB"}

package/dist/cjs/persistence/file/FileSystemAwsIamStore.d.ts

@@ -1,10 +1,18 @@
-import { AwsIamStore, ResourceTypeParts } from '../AwsIamStore.js';
+import { AwsIamStore, OrganizationPolicyType, ResourceTypeParts } from '../AwsIamStore.js';
 import { FileSystemAdapter } from './FileSystemAdapter.js';
 export declare class FileSystemAwsIamStore implements AwsIamStore {
     private readonly baseFolder;
     private readonly partition;
     private fsAdapter;
     constructor(baseFolder: string, partition: string, fsAdapter?: FileSystemAdapter);
+    private organizationPath;
+    private organizationMetadataPath;
+    private organizationalUnitsPath;
+    private organizationalUnitPath;
+    private organizationPoliciesPath;
+    private organizationPolicyPath;
+    private organizationPolicyMetadataPath;
+    private organizationalUnitMetadataPath;
     private accountPath;
     private buildResourcePath;
     private buildMetadataPath;
@@ -15,5 +23,39 @@ export declare class FileSystemAwsIamStore implements AwsIamStore {
     deleteResource(accountId: string, arn: string): Promise<void>;
     listResources(accountId: string, options: ResourceTypeParts): Promise<string[]>;
     syncResourceList(accountId: string, options: ResourceTypeParts, desiredResources: string[]): Promise<void>;
+    saveOrganizationMetadata(organizationId: string, metadataType: string, data: any): Promise<void>;
+    deleteOrganizationMetadata(organizationId: string, metadataType: string): Promise<void>;
+    listOrganizationalUnits(organizationId: string): Promise<string[]>;
+    deleteOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string): Promise<void>;
+    saveOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string, data: any): Promise<void>;
+    getOrganizationalUnitMetadata<T, D extends T>(organizationId: string, ouId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    deleteOrganizationalUnit(organizationId: string, ouId: string): Promise<void>;
+    deleteOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string): Promise<void>;
+    saveOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, data: any): Promise<void>;
+    getOrganizationPolicyMetadata<T, D extends T>(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    deleteOrganizationPolicy(organizationId: string, policyType: OrganizationPolicyType, policyId: string): Promise<void>;
+    listOrganizationPolicies(organizationId: string, policyType: OrganizationPolicyType): Promise<string[]>;
+    /**
+     * Checks if a given content value is empty.
+     *
+     * @param content The content to check.
+     * @returns true if the content is empty, false otherwise.
+     */
+    private isEmptyContent;
+    /**
+     * Read the content of a file or return a default value if the file does not exist.
+     *
+     * @param filePath the path to the file
+     * @param defaultValue the default value to return if the file does not exist
+     * @returns the content of the file or the default value
+     */
+    private contentOrDefault;
+    /**
+     * Either saves the provided data to a file or deletes the file if the data is empty.
+     *
+     * @param filePath the path to the file
+     * @param data the data to save in the file
+     */
+    private saveOrDeleteFile;
 }
 //# sourceMappingURL=FileSystemAwsIamStore.d.ts.map

package/dist/cjs/persistence/file/FileSystemAwsIamStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileSystemAwsIamStore.d.ts","sourceRoot":"","sources":["../../../../src/persistence/file/FileSystemAwsIamStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAElE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE1D,qBAAa,qBAAsB,YAAW,WAAW;IAIrD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAJ5B,OAAO,CAAC,SAAS,CAAmB;gBAGjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EAClC,SAAS,CAAC,EAAE,iBAAiB;IAS/B,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,iBAAiB;IAKnB,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC;IAsBV,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcvE,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAS7C,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAKV,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAS/E,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC;CA4BjB"}
+{"version":3,"file":"FileSystemAwsIamStore.d.ts","sourceRoot":"","sources":["../../../../src/persistence/file/FileSystemAwsIamStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE1D,qBAAa,qBAAsB,YAAW,WAAW;IAIrD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAJ5B,OAAO,CAAC,SAAS,CAAmB;gBAGjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EAClC,SAAS,CAAC,EAAE,iBAAiB;IAM/B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,wBAAwB;IAIhC,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,8BAA8B;IAYtC,OAAO,CAAC,8BAA8B;IAWtC,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,iBAAiB;IAKnB,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC;IAKV,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAYvE,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAK7C,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAKV,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAK/E,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC;IAsBV,wBAAwB,CAC5B,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC;IAKV,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvF,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKlE,gCAAgC,CACpC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAKV,8BAA8B,CAClC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC;IAKV,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChD,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAK7C,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7E,gCAAgC,CACpC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAUV,8BAA8B,CAClC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC;IAUV,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChD,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAU7C,wBAAwB,CAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAKV,wBAAwB,CAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,GACjC,OAAO,CAAC,MAAM,EAAE,CAAC;IAKpB;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAYtB;;;;;;OAMG;YACW,gBAAgB;IAW9B;;;;;OAKG;YACW,gBAAgB;CAY/B"}

package/dist/cjs/persistence/file/FileSystemAwsIamStore.js

@@ -11,10 +11,33 @@ class FileSystemAwsIamStore {
     constructor(baseFolder, partition, fsAdapter) {
         this.baseFolder = baseFolder;
         this.partition = partition;
-        console.log(`Initializing FileSystemAwsIamStore with baseFolder: ${baseFolder}, partition: ${partition}`);
         this.baseFolder = (0, path_1.join)(baseFolder, 'aws', partition);
         this.fsAdapter = fsAdapter || new FileSystemAdapter_js_1.FileSystemAdapter();
     }
+    organizationPath(organizationId) {
+        return (0, path_1.join)(this.baseFolder, 'organizations', organizationId).toLowerCase();
+    }
+    organizationMetadataPath(organizationId, metadataType) {
+        return (0, path_1.join)(this.organizationPath(organizationId), `${metadataType}.json`).toLowerCase();
+    }
+    organizationalUnitsPath(organizationId) {
+        return (0, path_1.join)(this.organizationPath(organizationId), 'ous').toLowerCase();
+    }
+    organizationalUnitPath(organizationId, ouId) {
+        return (0, path_1.join)(this.organizationalUnitsPath(organizationId), ouId).toLowerCase();
+    }
+    organizationPoliciesPath(organizationId, policyType) {
+        return (0, path_1.join)(this.organizationPath(organizationId), policyType).toLowerCase();
+    }
+    organizationPolicyPath(organizationId, policyType, policyId) {
+        return (0, path_1.join)(this.organizationPoliciesPath(organizationId, policyType), policyId).toLowerCase();
+    }
+    organizationPolicyMetadataPath(organizationId, policyType, policyId, metadataType) {
+        return (0, path_1.join)(this.organizationPolicyPath(organizationId, policyType, policyId), `${metadataType}.json`).toLowerCase();
+    }
+    organizationalUnitMetadataPath(organizationId, ouId, metadataType) {
+        return (0, path_1.join)(this.organizationalUnitPath(organizationId, ouId), `${metadataType}.json`).toLowerCase();
+    }
     accountPath(accountId) {
         return (0, path_1.join)(this.baseFolder, 'accounts', accountId).toLowerCase();
     }
@@ -26,29 +49,13 @@ class FileSystemAwsIamStore {
         return (0, path_1.join)(prefix, `${metadataType}.json`).toLowerCase();
     }
     async saveResourceMetadata(accountId, arn, metadataType, data) {
-        if (typeof data === 'string') {
-            data = data.trim();
-        }
-        if (data === undefined ||
-            data === null ||
-            data === '' ||
-            data === '{}' ||
-            data === '[]' ||
-            (Array.isArray(data) && data.length === 0) ||
-            (typeof data === 'object' && Object.keys(data).length === 0)) {
-            await this.deleteResourceMetadata(accountId, arn, metadataType);
-            return;
-        }
-        const content = typeof data === 'string' ? data : JSON.stringify(data, null, 2);
         const filePath = this.buildMetadataPath(accountId, arn, metadataType);
-        await this.fsAdapter.writeFile(filePath, content);
+        await this.saveOrDeleteFile(filePath, data);
     }
     async listResourceMetadata(accountId, arn) {
         // List all files in the resource directory to find metadata types
         const dirPath = this.buildResourcePath(accountId, arn);
-        // console.log(dirPath)
         const files = await this.fsAdapter.listDirectory(dirPath);
-        // console.log(files)
         // Filter for files that match the pattern of *.json
         const metadataTypes = files
             .filter((file) => file.endsWith('.json'))
@@ -57,11 +64,7 @@ class FileSystemAwsIamStore {
     }
     async getResourceMetadata(accountId, arn, metadataType, defaultValue) {
         const filePath = this.buildMetadataPath(accountId, arn, metadataType);
-        const contents = await this.fsAdapter.readFile(filePath);
-        if (!contents) {
-            return defaultValue;
-        }
-        return JSON.parse(contents);
+        return this.contentOrDefault(filePath, defaultValue);
     }
     async deleteResourceMetadata(accountId, arn, metadataType) {
         const filePath = this.buildMetadataPath(accountId, arn, metadataType);
@@ -72,25 +75,116 @@ class FileSystemAwsIamStore {
         await this.fsAdapter.deleteDirectory(dirPath);
     }
     async listResources(accountId, options) {
-        const dirPath = (0, util_js_1.resourceTypePrefix)(this.accountPath(accountId), { ...options, partition: this.partition }, path_1.sep);
+        const dirPath = (0, util_js_1.resourceTypePrefix)(this.accountPath(accountId), { ...options }, path_1.sep);
         return await this.fsAdapter.listDirectory(dirPath);
     }
     async syncResourceList(accountId, options, desiredResources) {
-        const dirPath = (0, util_js_1.resourceTypePrefix)(this.accountPath(accountId), { ...options, partition: this.partition }, path_1.sep);
+        const dirPath = (0, util_js_1.resourceTypePrefix)(this.accountPath(accountId), { ...options }, path_1.sep);
         const existingSubDirs = (await this.fsAdapter.listDirectory(dirPath)).map((subDir) => (0, path_1.join)(dirPath, subDir));
         const desiredDirs = new Set(desiredResources.map((desiredArn) => {
             const resourceDir = this.buildResourcePath(accountId, desiredArn);
             return resourceDir;
         }));
-        // console.log(desiredDirs)
         // Identify resources that exist in storage but not in desiredResources.
         const resourcesToDelete = existingSubDirs.filter((s) => !desiredDirs.has(s));
         for (const resource of resourcesToDelete) {
-            // const resourceDir = join(dirPath, resource)
-            // console.log('Deleting resource directory:', resource)
             await this.fsAdapter.deleteDirectory(resource);
         }
     }
+    async saveOrganizationMetadata(organizationId, metadataType, data) {
+        const filePath = this.organizationMetadataPath(organizationId, metadataType);
+        await this.saveOrDeleteFile(filePath, data);
+    }
+    async deleteOrganizationMetadata(organizationId, metadataType) {
+        const filePath = this.organizationMetadataPath(organizationId, metadataType);
+        await this.fsAdapter.deleteFile(filePath);
+    }
+    async listOrganizationalUnits(organizationId) {
+        const dirPath = this.organizationalUnitsPath(organizationId);
+        return await this.fsAdapter.listDirectory(dirPath);
+    }
+    async deleteOrganizationalUnitMetadata(organizationId, ouId, metadataType) {
+        const filePath = this.organizationalUnitMetadataPath(organizationId, ouId, metadataType);
+        await this.fsAdapter.deleteFile(filePath);
+    }
+    async saveOrganizationalUnitMetadata(organizationId, ouId, metadataType, data) {
+        const filePath = this.organizationalUnitMetadataPath(organizationId, ouId, metadataType);
+        await this.saveOrDeleteFile(filePath, data);
+    }
+    async getOrganizationalUnitMetadata(organizationId, ouId, metadataType, defaultValue) {
+        const filePath = this.organizationalUnitMetadataPath(organizationId, ouId, metadataType);
+        return this.contentOrDefault(filePath, defaultValue);
+    }
+    async deleteOrganizationalUnit(organizationId, ouId) {
+        const dirPath = this.organizationalUnitPath(organizationId, ouId);
+        await this.fsAdapter.deleteDirectory(dirPath);
+    }
+    async deleteOrganizationPolicyMetadata(organizationId, policyType, policyId, metadataType) {
+        const filePath = this.organizationPolicyMetadataPath(organizationId, policyType, policyId, metadataType);
+        await this.fsAdapter.deleteFile(filePath);
+    }
+    async saveOrganizationPolicyMetadata(organizationId, policyType, policyId, metadataType, data) {
+        const filePath = this.organizationPolicyMetadataPath(organizationId, policyType, policyId, metadataType);
+        await this.saveOrDeleteFile(filePath, data);
+    }
+    async getOrganizationPolicyMetadata(organizationId, policyType, policyId, metadataType, defaultValue) {
+        const filePath = this.organizationPolicyMetadataPath(organizationId, policyType, policyId, metadataType);
+        return this.contentOrDefault(filePath, defaultValue);
+    }
+    async deleteOrganizationPolicy(organizationId, policyType, policyId) {
+        const dirPath = this.organizationPolicyPath(organizationId, policyType, policyId);
+        await this.fsAdapter.deleteDirectory(dirPath);
+    }
+    async listOrganizationPolicies(organizationId, policyType) {
+        const dirPath = this.organizationPoliciesPath(organizationId, policyType);
+        return await this.fsAdapter.listDirectory(dirPath);
+    }
+    /**
+     * Checks if a given content value is empty.
+     *
+     * @param content The content to check.
+     * @returns true if the content is empty, false otherwise.
+     */
+    isEmptyContent(content) {
+        return (content === undefined ||
+            content === null ||
+            content === '' ||
+            content === '{}' ||
+            content === '[]' ||
+            (Array.isArray(content) && content.length === 0) ||
+            (typeof content === 'object' && Object.keys(content).length === 0));
+    }
+    /**
+     * Read the content of a file or return a default value if the file does not exist.
+     *
+     * @param filePath the path to the file
+     * @param defaultValue the default value to return if the file does not exist
+     * @returns the content of the file or the default value
+     */
+    async contentOrDefault(filePath, defaultValue) {
+        const contents = await this.fsAdapter.readFile(filePath);
+        if (!contents) {
+            return defaultValue;
+        }
+        return JSON.parse(contents);
+    }
+    /**
+     * Either saves the provided data to a file or deletes the file if the data is empty.
+     *
+     * @param filePath the path to the file
+     * @param data the data to save in the file
+     */
+    async saveOrDeleteFile(filePath, data) {
+        if (typeof data === 'string') {
+            data = data.trim();
+        }
+        if (this.isEmptyContent(data)) {
+            await this.fsAdapter.deleteFile(filePath);
+            return;
+        }
+        const content = typeof data === 'string' ? data : JSON.stringify(data, null, 2);
+        await this.fsAdapter.writeFile(filePath, content);
+    }
 }
 exports.FileSystemAwsIamStore = FileSystemAwsIamStore;
 //# sourceMappingURL=FileSystemAwsIamStore.js.map

package/dist/cjs/persistence/file/FileSystemAwsIamStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"FileSystemAwsIamStore.js","sourceRoot":"","sources":["../../../../src/persistence/file/FileSystemAwsIamStore.ts"],"names":[],"mappings":";;;AAAA,+BAAgC;AAEhC,wCAA+D;AAC/D,iEAA0D;AAE1D,MAAa,qBAAqB;IAIb;IACA;IAJX,SAAS,CAAmB;IAEpC,YACmB,UAAkB,EAClB,SAAiB,EAClC,SAA6B;QAFZ,eAAU,GAAV,UAAU,CAAQ;QAClB,cAAS,GAAT,SAAS,CAAQ;QAGlC,OAAO,CAAC,GAAG,CACT,uDAAuD,UAAU,gBAAgB,SAAS,EAAE,CAC7F,CAAA;QACD,IAAI,CAAC,UAAU,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;QACpD,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,IAAI,wCAAiB,EAAE,CAAA;IACvD,CAAC;IAEO,WAAW,CAAC,SAAiB;QACnC,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;IACnE,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,GAAW;QACtD,OAAO,IAAA,wBAAc,EAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5E,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,GAAW,EAAE,YAAoB;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACrD,OAAO,IAAA,WAAI,EAAC,MAAM,EAAE,GAAG,YAAY,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,GAAW,EACX,YAAoB,EACpB,IAAkB;QAElB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACpB,CAAC;QACD,IACE,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,IAAI;YACb,IAAI,KAAK,EAAE;YACX,IAAI,KAAK,IAAI;YACb,IAAI,KAAK,IAAI;YACb,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;YAC1C,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAC5D,CAAC;YACD,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;YAC/D,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QACrE,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,SAAiB,EAAE,GAAW;QACvD,kEAAkE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtD,uBAAuB;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACzD,qBAAqB;QACrB,oDAAoD;QACpD,MAAM,aAAa,GAAG,KAAK;aACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA,CAAC,6BAA6B;QAEzE,OAAO,aAAa,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,GAAW,EACX,YAAoB,EACpB,YAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,YAAuD,CAAA;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAM,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,SAAiB,EACjB,GAAW,EACX,YAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QACrE,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,GAAW;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtD,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,OAA0B;QAC/D,MAAM,OAAO,GAAG,IAAA,4BAAkB,EAChC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAC3B,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACzC,UAAG,CACJ,CAAA;QACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,OAA0B,EAC1B,gBAA0B;QAE1B,MAAM,OAAO,GAAG,IAAA,4BAAkB,EAChC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAC3B,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACzC,UAAG,CACJ,CAAA;QAED,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACnF,IAAA,WAAI,EAAC,OAAO,EAAE,MAAM,CAAC,CACtB,CAAA;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,gBAAgB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YAClC,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YACjE,OAAO,WAAW,CAAA;QACpB,CAAC,CAAC,CACH,CAAA;QAED,2BAA2B;QAC3B,wEAAwE;QACxE,MAAM,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5E,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;YACzC,8CAA8C;YAC9C,wDAAwD;YACxD,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;QAChD,CAAC;IACH,CAAC;CACF;AA1ID,sDA0IC"}
+{"version":3,"file":"FileSystemAwsIamStore.js","sourceRoot":"","sources":["../../../../src/persistence/file/FileSystemAwsIamStore.ts"],"names":[],"mappings":";;;AAAA,+BAAgC;AAEhC,wCAA+D;AAC/D,iEAA0D;AAE1D,MAAa,qBAAqB;IAIb;IACA;IAJX,SAAS,CAAmB;IAEpC,YACmB,UAAkB,EAClB,SAAiB,EAClC,SAA6B;QAFZ,eAAU,GAAV,UAAU,CAAQ;QAClB,cAAS,GAAT,SAAS,CAAQ;QAGlC,IAAI,CAAC,UAAU,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;QACpD,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,IAAI,wCAAiB,EAAE,CAAA;IACvD,CAAC;IAEO,gBAAgB,CAAC,cAAsB;QAC7C,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,WAAW,EAAE,CAAA;IAC7E,CAAC;IAEO,wBAAwB,CAAC,cAAsB,EAAE,YAAoB;QAC3E,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,GAAG,YAAY,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IAC1F,CAAC;IAEO,uBAAuB,CAAC,cAAsB;QACpD,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACzE,CAAC;IAEO,sBAAsB,CAAC,cAAsB,EAAE,IAAY;QACjE,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;IAC/E,CAAC;IAEO,wBAAwB,CAC9B,cAAsB,EACtB,UAAkC;QAElC,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9E,CAAC;IAEO,sBAAsB,CAC5B,cAAsB,EACtB,UAAkC,EAClC,QAAgB;QAEhB,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;IAChG,CAAC;IAEO,8BAA8B,CACpC,cAAsB,EACtB,UAAkC,EAClC,QAAgB,EAChB,YAAoB;QAEpB,OAAO,IAAA,WAAI,EACT,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,CAAC,EACjE,GAAG,YAAY,OAAO,CACvB,CAAC,WAAW,EAAE,CAAA;IACjB,CAAC;IAEO,8BAA8B,CACpC,cAAsB,EACtB,IAAY,EACZ,YAAoB;QAEpB,OAAO,IAAA,WAAI,EACT,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,IAAI,CAAC,EACjD,GAAG,YAAY,OAAO,CACvB,CAAC,WAAW,EAAE,CAAA;IACjB,CAAC;IAEO,WAAW,CAAC,SAAiB;QACnC,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;IACnE,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,GAAW;QACtD,OAAO,IAAA,wBAAc,EAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5E,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,GAAW,EAAE,YAAoB;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACrD,OAAO,IAAA,WAAI,EAAC,MAAM,EAAE,GAAG,YAAY,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,GAAW,EACX,YAAoB,EACpB,IAAkB;QAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QACrE,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,SAAiB,EAAE,GAAW;QACvD,kEAAkE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QACzD,oDAAoD;QACpD,MAAM,aAAa,GAAG,KAAK;aACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA,CAAC,6BAA6B;QAEzE,OAAO,aAAa,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,GAAW,EACX,YAAoB,EACpB,YAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QACrE,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,SAAiB,EACjB,GAAW,EACX,YAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QACrE,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,GAAW;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACtD,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,OAA0B;QAC/D,MAAM,OAAO,GAAG,IAAA,4BAAkB,EAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,UAAG,CAAC,CAAA;QACpF,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,OAA0B,EAC1B,gBAA0B;QAE1B,MAAM,OAAO,GAAG,IAAA,4BAAkB,EAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,UAAG,CAAC,CAAA;QAEpF,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACnF,IAAA,WAAI,EAAC,OAAO,EAAE,MAAM,CAAC,CACtB,CAAA;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,gBAAgB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YAClC,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;YACjE,OAAO,WAAW,CAAA;QACpB,CAAC,CAAC,CACH,CAAA;QAED,wEAAwE;QACxE,MAAM,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAE5E,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,cAAsB,EACtB,YAAoB,EACpB,IAAS;QAET,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;QAC5E,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,cAAsB,EAAE,YAAoB;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;QAC5E,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,cAAsB;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAA;QAC5D,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,gCAAgC,CACpC,cAAsB,EACtB,IAAY,EACZ,YAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,8BAA8B,CAAC,cAAc,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;QACxF,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,8BAA8B,CAClC,cAAsB,EACtB,IAAY,EACZ,YAAoB,EACpB,IAAS;QAET,MAAM,QAAQ,GAAG,IAAI,CAAC,8BAA8B,CAAC,cAAc,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;QACxF,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,cAAsB,EACtB,IAAY,EACZ,YAAoB,EACpB,YAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,8BAA8B,CAAC,cAAc,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;QACxF,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,cAAsB,EAAE,IAAY;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;QACjE,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,gCAAgC,CACpC,cAAsB,EACtB,UAAkC,EAClC,QAAgB,EAChB,YAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,8BAA8B,CAClD,cAAc,EACd,UAAU,EACV,QAAQ,EACR,YAAY,CACb,CAAA;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,8BAA8B,CAClC,cAAsB,EACtB,UAAkC,EAClC,QAAgB,EAChB,YAAoB,EACpB,IAAS;QAET,MAAM,QAAQ,GAAG,IAAI,CAAC,8BAA8B,CAClD,cAAc,EACd,UAAU,EACV,QAAQ,EACR,YAAY,CACb,CAAA;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,cAAsB,EACtB,UAAkC,EAClC,QAAgB,EAChB,YAAoB,EACpB,YAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,8BAA8B,CAClD,cAAc,EACd,UAAU,EACV,QAAQ,EACR,YAAY,CACb,CAAA;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,cAAsB,EACtB,UAAkC,EAClC,QAAgB;QAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAA;QACjF,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,cAAsB,EACtB,UAAkC;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAA;QACzE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IACpD,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,OAAY;QACjC,OAAO,CACL,OAAO,KAAK,SAAS;YACrB,OAAO,KAAK,IAAI;YAChB,OAAO,KAAK,EAAE;YACd,OAAO,KAAK,IAAI;YAChB,OAAO,KAAK,IAAI;YAChB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;YAChD,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CACnE,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAC5B,QAAgB,EAChB,YAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,YAAiB,CAAA;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAM,CAAA;IAClC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,IAAS;QACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACpB,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC/E,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACnD,CAAC;CACF;AAvUD,sDAuUC"}

package/dist/cjs/persistence/util.d.ts

@@ -18,7 +18,7 @@ export declare function resourcePrefix(startingPath: string, resourceArn: string
  * @returns A string that represents the resource type prefix.
  */
 export declare function resourceTypePrefix(startingPath: string, parts: {
-    partition: string;
+    partition?: string;
     account?: string;
     service: string;
     region?: string;

package/dist/cjs/persistence/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../src/persistence/util.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,MAAM,CAeR;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,EACD,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKtF"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../src/persistence/util.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE;IACL,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,EACD,SAAS,EAAE,MAAM,GAChB,MAAM,CAYR;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKtF"}

package/dist/cjs/persistence/util.js

@@ -18,10 +18,9 @@ function resourcePrefix(startingPath, resourceArn, separator) {
     const parts = (0, arn_js_1.splitArnParts)(resourceArn);
     return joinPathParts([
         startingPath,
-        parts.partition,
         parts.service,
         parts.region,
-        parts.accountId,
+        parts.accountId === 'aws' ? parts.accountId : undefined,
         parts.resourceType,
         parts.resourcePath ? encodeURIComponent(parts.resourcePath.trim()) : undefined
     ], separator);
@@ -35,7 +34,14 @@ function resourcePrefix(startingPath, resourceArn, separator) {
  * @returns A string that represents the resource type prefix.
  */
 function resourceTypePrefix(startingPath, parts, separator) {
-    return joinPathParts([startingPath, parts.partition, parts.service, parts.region, parts.account, parts.resourceType], separator);
+    return joinPathParts([
+        startingPath,
+        parts.partition,
+        parts.service,
+        parts.region,
+        parts.account === 'aws' ? parts.account : undefined,
+        parts.resourceType
+    ], separator);
 }
 function joinPathParts(parts, separator) {
     // Filter out undefined or empty strings

package/dist/cjs/persistence/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../src/persistence/util.ts"],"names":[],"mappings":";;AAYA,wCAmBC;AAUD,gDAeC;AAED,sCAKC;AA/DD,4CAA+C;AAE/C;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,YAAoB,EACpB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,KAAK,GAAG,IAAA,sBAAa,EAAC,WAAW,CAAC,CAAA;IAExC,OAAO,aAAa,CAClB;QACE,YAAY;QACZ,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/E,EACD,SAAS,CACV,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAChC,YAAoB,EACpB,KAMC,EACD,SAAiB;IAEjB,OAAO,aAAa,CAClB,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,EAC/F,SAAS,CACV,CAAA;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,KAA6B,EAAE,SAAiB;IAC5E,wCAAwC;IACxC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtF,sCAAsC;IACtC,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AACtC,CAAC"}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../src/persistence/util.ts"],"names":[],"mappings":";;AAYA,wCAkBC;AAUD,gDAsBC;AAED,sCAKC;AArED,4CAA+C;AAE/C;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,YAAoB,EACpB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,KAAK,GAAG,IAAA,sBAAa,EAAC,WAAW,CAAC,CAAA;IAExC,OAAO,aAAa,CAClB;QACE,YAAY;QACZ,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACvD,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/E,EACD,SAAS,CACV,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAChC,YAAoB,EACpB,KAMC,EACD,SAAiB;IAEjB,OAAO,aAAa,CAClB;QACE,YAAY;QACZ,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACnD,KAAK,CAAC,YAAY;KACnB,EACD,SAAS,CACV,CAAA;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,KAA6B,EAAE,SAAiB;IAC5E,wCAAwC;IACxC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtF,sCAAsC;IACtC,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AACtC,CAAC"}

package/dist/cjs/services.d.ts

@@ -1,3 +1,3 @@
-export type AwsService = 'iam' | 'kms' | 'lambda' | 's3';
+export type AwsService = 'iam' | 'kms' | 'lambda' | 'organizations' | 's3';
 export declare const allServices: AwsService[];
 //# sourceMappingURL=services.d.ts.map

package/dist/cjs/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAA;AAExD,eAAO,MAAM,WAAW,EAAE,UAAU,EAAmC,CAAA"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,eAAe,GAAG,IAAI,CAAA;AAE1E,eAAO,MAAM,WAAW,EAAE,UAAU,EAAoD,CAAA"}

package/dist/cjs/services.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.allServices = void 0;
-exports.allServices = ['iam', 'kms', 'lambda', 's3'];
+exports.allServices = ['iam', 'kms', 'lambda', 'organizations', 's3'];
 //# sourceMappingURL=services.js.map

package/dist/cjs/services.js.map

@@ -1 +1 @@
-{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AAEa,QAAA,WAAW,GAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA"}
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../src/services.ts"],"names":[],"mappings":";;;AAEa,QAAA,WAAW,GAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,CAAA"}

package/dist/cjs/syncs/organizations/organizations.d.ts

@@ -0,0 +1,49 @@
+import { Account, Organization, OrganizationalUnit, OrganizationsClient, Root } from '@aws-sdk/client-organizations';
+import { Sync } from '../sync.js';
+export declare const OrganizationSync: Sync;
+/**
+ * Get the details of an organization or an account.
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the details of the organization the account belongs to or undefined if the account is not part of an organization or does not have permission.
+ */
+export declare function getOrganizationDetails(client: OrganizationsClient): Promise<Organization | undefined>;
+/**
+ * Get the root Organizational Unit for an organization
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the root Organizational Unit for the organization if it exists
+ */
+export declare function getOrganizationRoot(client: OrganizationsClient): Promise<Root | undefined>;
+/**
+ * Get the tags for an Organizational Unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param ouId The AWS id of the Organizational Unit to get the tags for
+ * @returns The tags for the Organizational Unit
+ */
+export declare function getTagsForOu(client: OrganizationsClient, ouId: string): Promise<Record<string, string>>;
+/**
+ * Get the tags for an account
+ * @param client The OrganizationsClient to use
+ * @param accountId The AWS id of the account to get the tags for
+ * @returns The tags for the account
+ */
+export declare function getTagsForAccount(client: OrganizationsClient, accountId: string): Promise<Record<string, string>>;
+/**
+ * Get the organizational units for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The organizational units directly under the parent
+ */
+export declare function getChildOrgUnits(client: OrganizationsClient, parentId: string): Promise<OrganizationalUnit[]>;
+/**
+ * Get the accounts for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The accounts directly under the parent
+ */
+export declare function getAccountsForParent(client: OrganizationsClient, parentId: string): Promise<Account[]>;
+//# sourceMappingURL=organizations.d.ts.map

package/dist/cjs/syncs/organizations/organizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../../../src/syncs/organizations/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EAUP,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EAGnB,IAAI,EACL,MAAM,+BAA+B,CAAA;AAKtC,OAAO,EAAE,IAAI,EAAe,MAAM,YAAY,CAAA;AA+B9C,eAAO,MAAM,gBAAgB,EAAE,IAmM9B,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAenC;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAchG;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAEjC;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAEjC;AA4BD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/B;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC,CAYpB"}